60.304 CVE tracked
809 Exploited now
188 Used by ransomware
Last sync
Microsoft vulnerabilities
17.829 CVE
| Identifier | Severity, sort descending | Product and flaw | EPSS, sort descending | In KEV since, sort descending |
|---|---|---|---|---|
| CVE-2026-70102 | HIGH 7.8 | microsoft windows_10_1809 Use after free in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-70093 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-70027 | HIGH 7.8 | microsoft windows_10_21h2 Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-70023 | HIGH 7.8 | microsoft windows_10_1809 Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-70015 | HIGH 7.8 | microsoft windows_10_1607 Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-69959 | HIGH 7.8 | microsoft windows_10_1607 Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally. | 0.4% | — |
| CVE-2026-69957 | HIGH 7.8 | microsoft windows_10_1607 Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-69953 | HIGH 7.8 | microsoft windows_10_1607 Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-69952 | HIGH 7.8 | microsoft windows_10_1607 Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-69950 | HIGH 7.8 | microsoft windows_10_1607 Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-69949 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-69942 | HIGH 7.8 | microsoft windows_11_23h2 Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally. | 0.4% | — |
| CVE-2026-69934 | HIGH 7.8 | microsoft windows_11_23h2 Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-69916 | HIGH 7.8 | microsoft windows_10_1607 Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-69898 | HIGH 7.8 | microsoft windows_10_1809 Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-69471 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-69354 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-68836 | HIGH 7.8 | microsoft windows_10_1607 Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-21517 | MED 4.7 | microsoft windows_app Improper link resolution before file access ('link following') in Windows App for Mac allows an authorized attacker to elevate privileges locally. | 0.4% | — |
| CVE-2026-97001 | HIGH 7.8 | microsoft 365_apps Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. | 0.4% | — |
| CVE-2026-85939 | MED 5.3 | microsoft windows_10_1607 Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network. | 0.4% | — |
| CVE-2024-54138 | MED 6.1 | microsoft nugetgallery NuGet Gallery is a package repository that powers nuget.org. The NuGetGallery has a security vulnerability related to its handling of autolinks in Markdown content. While the platform properly filters out JavaScript from standard links, it does not adequately | 0.4% | — |
| CVE-2024-43511 | HIGH 7.0 | microsoft windows_10_1507 Windows Kernel Elevation of Privilege Vulnerability | 0.4% | — |
| CVE-2026-96927 | MED 5.5 | microsoft windows_10_1607 Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. | 0.4% | — |
| CVE-2026-96854 | MED 5.5 | microsoft windows_10_1607 Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally. | 0.4% | — |